Skip to content

chore(deps): update fro-bot/agent to v0.130.2 - #501

Merged
mrbro-bot[bot] merged 1 commit into
mainfrom
renovate/fro-bot-agent-0.x
Oct 31, 2026
Merged

mrbro-bot[bot] merged 1 commit into
mainfrom
renovate/fro-bot-agent-0.x

Conversation

@mrbro-bot

@mrbro-bot mrbro-bot Bot commented Oct 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
fro-bot/agent action patch v0.130.0 → v0.130.2 OpenSSF Scorecard

Release Notes

fro-bot/agent

v0.130.2

Compare Source

What's new

OpenCode V2 pin updates from Renovate now regenerate their SHA-256 digests automatically, preventing builds from failing because the version changed while the old digests remained. The pin’s Renovate rule runs the sync script before rebuilding the Action bundle, so the embedded pin is refreshed in the same update.

This removes the previous manual regeneration step; the configured commands also match the Renovate action’s allowed-command rules. #​1998

Full changelog

0.130.2 (2026-10-31)

Build System
Bug Fixes
  • deps: regenerate the OpenCode V2 pin digests when Renovate bumps it (#​1998) (200837f)

v0.130.1

Compare Source

What's new

OpenCode V2 workspace agents could start successfully but fail their first model request with a 401 because fresh per-spawn databases skip the migration that imports provider credentials. Each spawn now provisions credentials from the protected workspace secret and checks that the configured model's provider has a usable credential before readiness; missing credentials keep the spawn unready. The gateway proxy also limits forwarding to the exact routes its client needs, preventing access to upstream credential-management endpoints, and the workspace smoke test now verifies an actual model request and the no-credential failure path. #​1993

Release jobs were spending several minutes rerunning install, lint, and build checks when semantic-release pushed its release commit and tag, even though CI had already run them. The release job now skips installing git hooks, avoiding those redundant pre-push checks while leaving the release-notes narration watch intact. #​1991

Full changelog

0.130.1 (2026-10-31)

Bug Fixes
  • workspace: provision provider credentials into each OpenCode V2 spawn (#​1993) (e8fee23)
Continuous Integration

Configuration

📅 Schedule: (in timezone America/Phoenix)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@mrbro-bot mrbro-bot Bot added action GitHub Action related automerge Automated merge approved dependencies Dependency updates or security alerts github-actions GitHub Actions workflows patch Patch version changes renovate Renovate bot updates labels Oct 31, 2026
@mrbro-bot
mrbro-bot Bot enabled auto-merge (squash) October 31, 2026 04:40
@mrbro-bot
mrbro-bot Bot merged commit cba4919 into main Oct 31, 2026
3 checks passed
@mrbro-bot
mrbro-bot Bot deleted the renovate/fro-bot-agent-0.x branch October 31, 2026 04:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action GitHub Action related automerge Automated merge approved dependencies Dependency updates or security alerts github-actions GitHub Actions workflows patch Patch version changes renovate Renovate bot updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants